Senior Auditor - IT Systems and Controls

About the role

Join Lambda, a leader in AI cloud infrastructure, as a Senior Auditor specializing in IT Systems and Controls. You will play a crucial role in ensuring the integrity of our financial reporting through rigorous IT SOX testing and internal audit projects. This position involves direct engagement with engineering and IT teams to build and maintain control environments.

Key facts

What you'll do

• Lead and document SOX testing for IT General Controls (ITGCs), IT Automated Controls, and key reports across various systems.
• Contribute to the annual IT SOX risk assessment and scoping processes.
• Conduct walkthroughs and evaluate the design and effectiveness of IT controls for both proprietary and third-party systems.
• Review and ensure the quality of testing performed by co-sourced personnel or junior auditors.
• Facilitate evidence collection and track remediation efforts, holding system owners accountable for timelines.
• Identify control weaknesses, assess their impact, and collaborate with engineering and IT management on remediation plans.
• Maintain comprehensive SOX 404 documentation, including process narratives, risk matrices, and testing approaches.
• Execute internal audit and advisory projects focused on IT, data governance, and emerging technology risks.
• Advise technology and business stakeholders on IT risk management and control optimization.
• Evaluate data integrity, system development, access management, and change management processes.
• Partner with engineering and IT teams to design practical and scalable controls for a dynamic codebase.
• Assess the severity of control deficiencies and work with owners to develop and validate remediation plans.
• Recommend process improvements that enhance efficiency while maintaining control effectiveness.
• Serve as the primary contact for IT, Engineering, and Security teams on IT SOX and assurance activities.
• Support external auditors during IT SOX testing by providing evidence and context.
• Provide guidance to IT and business stakeholders, and informally mentor junior team members, on IT control requirements.
• Prepare clear workpapers and status updates for internal audit leadership and Audit Committee reporting.
• Translate complex IT control issues into understandable terms for non-technical stakeholders.
• Monitor industry and regulatory changes relevant to assigned systems and report emerging risks.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Accounting, or a related field.
• 8+ years of progressive experience in IT audit, IT risk, or IT SOX compliance, equivalent to a Manager at a Big Four firm or a comparable internal audit role.
• Experience at a Big Four accounting firm or similar in Internal/External Audit or IT consulting, including reviewing work of junior staff.
• Deep understanding of ITGCs, IT Automated Controls, key report testing, and their relevance to ICFR and IIA standards.
• Proven ability to independently lead audits of both internal business systems and third-party SaaS applications.
• Demonstrated experience in data governance, system implementation reviews, and cybersecurity risk assessments.
• Experience with audit management tools (e.g., AuditBoard, Archer, Workiva) for SOX and IT compliance programs.
• Strong analytical and technical skills to evaluate IT and data risks in complex environments.
• Excellent communication and interpersonal skills for engaging with and influencing senior stakeholders.
• Ability to review and quality-check the work of junior team members or co-sourced resources.
• Organized, detail-oriented, and capable of managing multiple engagements in a fast-paced environment with minimal supervision.

Nice to have

• CISA certification (strongly preferred); CISSP, CPA, or CIA (a plus).
• Experience with data analytics and automated testing tools (e.g., SQL, Python, ACL, Power BI).
• Exposure to cloud computing, cybersecurity, and RPA, and their control implications.
• Prior experience in a fast-growth or pre-IPO organization, scaling a SOX program.
• Familiarity with cybersecurity frameworks (e.g., NIST, ISO 27001, COBIT).
• Experience auditing engineering practices like GitHub-based change management or CI/CD pipelines.
• Involvement in system implementation or upgrade reviews for ERP or financial systems.
• Experience presenting findings to senior leadership or an Audit Committee.

Skills & tools

• IT General Controls (ITGCs)
• IT Automated Controls
• IT SOX Compliance
• Internal Audit Methodology
• Data Governance
• System Implementation Reviews
• Cybersecurity Risk Assessments
• Audit Management Tools (e.g., AuditBoard, Archer, Workiva)
• SQL, Python, ACL, Power BI (nice to have)

Practical notes

• This position offers generous cash and equity compensation.
• Benefits include health, dental, and vision coverage for you and your dependents, wellness and commuter stipends for select roles, a 401k plan with a 2% company match (for USA employees), and a flexible paid time off plan.